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This listing of claims will replace all prior versions, and listings, of claims in the 
application: 
Listing of Claims: 

Claims 1-8 (Cancelled) 

9. (Currently Amended) An apparatus device for communicating with other devices 
to allow them to acc e ss applications, comprising : 
at least a first application; 

an authentication component configured to authenticate means for authenticating 
a communicating device; 

an access control componentm eaas accessible by a communicating device 
requesting access to the first application without the communicating device having been 
authenticated by the authentication component meaas, and arranged to arbitrate whether 
access of the communicating device to the first application is granted or refused wherein 
if the arbitration requires an authentication of the communicating device, the access 
control component means configured to instructs the authentication component meaas to 
authenticate the communicating device, wherein the access control componentm eans is 
configured t o receives indications originating from the communicating device identifying 
the communicating device and the application requested. 

Claims 10-26 (Cancelled). 

27. (Currently Amended) An apparatus device for communicating with other d e vices 
to allow them to access applications, comprising: 

at least first and second applications; 

an authentication component configured to authenticate means for authenticating a 
communicating device; 

a_first access control componentm eaas accessible by a communicating device 
requesting access to the first application without the communicating device having been 
authenticated by the authentication componentm eaas, and arranged to arbitrate whether 
access of the communicating device to the first application is granted or refused wherein 
if the arbitration requires an authentication of the communicating device, the access 
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control componentm eafts configured to instructs the authentication component means to 
authenticate the communicating device; 

a_second access control componentm eaHS accessible by a communicating device 
requesting access to the second application without the communicating device having 
been authenticated by the authentication componentm eans, and arranged to arbitrate 
whether access of the communicating device to the second application is granted or 
refused wherein if the arbitration requires an authentication of the communicating device, 
the second access control componento eans configured to instructs the authentication 
componentm eafts to authenticate the communicating device, wherein the first access 
control componentm eans is accessible by a communicating device requesting access to 
the second application without the communicating device having been authenticated by 
the authentication component meass, and is arranged to provide the access of the 
communicating device to the second access control componentm eans. 

Claim 28 (Cancelled). 

29. (Currently Amended) A method of arbitrating the access of a requesting devic e to 
a servic e provided by a providing device comprising : 

sending a request to access fee a_service from the arequesting device to the a 
providing device; 

receiving the request at the providing device and passing it, without authenticating 
the requesting device, to an arbitration componento eaas interfacing the service; 

determining, in the arbitration component meafts, whether to grant or refuse access 
to the first application by the requesting device, wherein if the determination requires an 
authentication of the requesting device, the authentication is performed during that 
determination and not previously, wherein the determination is made on the basis of the 
identity of service requested and/or the identity of the requesting device. 

Claims 30-32 (Cancelled). 

33. (Currently Amended) The apparatus A device as claimed in claim 9 wherein the 
access control componento eafts is arranged to store security indications in association with 
accessible applications, wherein the stored security indication associated with the first 
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application is indicative of whether authentication of the communicating device is or is not 
required during arbitration. 

34. (Currently Amended) The apparatus A device as claimed in claim 33 wherein the 
stored security indication associated with the first application is indicative of whether 
authentication of the communicating device is or is not required during arbitration, in 
independence of the identity of the communicating device. 

35. (Currently Amended) The apparatus A device as claimed in claim 9 further 
comprising a user interface for authorizing configured to authorize access to an application 
during arbitration, the access control component- means being arranged to store security 
indications in association with accessible applications, wherein the stored security indication 
associated with the first application is indicative of whether user authorization of the 
communicating device is or is not required during arbitration. 

36. (Currently Amended) The apparatus A devic e as claimed in claim 35 wherein the 
access control componente eaas is further arranged to store trust indications in association with 
devices, and wherein the stored security indication associated with the first application is 
indicative of whether user authorization of the communicating device is or is not required during 
arbitration in dependence upon any stored trust indication associated with the communicating 
device. 

37. (Currently Amended) The apparatus A device as claimed in claim 9 wherein 
authentication comprises secret key exchange between the device and the communicating device. 

38. (Previously presented) A method as claimed in claim 29 comprising storing 
security indications in association with accessible applications, wherein the stored security 
indication associated with the first application is indicative of whether authentication of the 
requesting device is or is not required during arbitration. 

39. (Previously presented) A method as claimed in claim 38 wherein the stored 
security indication associated with the first application is indicative of whether authentication of 
the requesting device is or is not required during arbitration, in independence of the identity of 
the requesting device. 
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40. (Previously presented) A method as claimed in claim 29 further comprising 
authorizing access to an application during arbitration via a user interface, and storing security 
indications in association with accessible applications, wherein the stored security indication 
associated with the first application is indicative of whether user authorization of the 
communicating device is or is not required during arbitration. 

41. (Previously presented) A method as claimed in claim 40 comprising storing trust 
indications in association with devices, and wherein the stored security indication associated 
with the first application is indicative of whether user authorization of the requesting device is or 
is not required during arbitration in dependence upon any stored trust indication associated with 
the requesting device. 

42. (Previously presented) A method as claimed in claim 29 wherein authentication 
comprises secret key exchange between the providing device and the requesting device. 

43. (New) A method comprising: 

receiving a request to access an application and passing it, without authenticating 
the requesting device, to an arbitration component interfacing the service; and 

determining, in the arbitration component, whether to grant or refuse access to the 
application, wherein if the determination requires an authentication of the requesting 
device, the authentication is performed during that determination and not previously, 
wherein the determination is made on the basis of the identity of the application 
requested. 

44. (New) The method of claim 43 wherein the determination is made on the basis of 
the identity of the requesting device. 
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